Re: Good news for SPARC

Glenn_at_canit.se
Date: 11/01/03 

Date: 1 Nov 2003 16:58:6 +0100

> + On 31-Okt-03 10:30:26
 +Martin Høyer Kristiansen <mhkristiansen@yahoo.dk> wrote

>Lon Stowell wrote:

>> Or even the mere act of previewing email with hostile content
>> planting a virus or worm. Or the insane idea of using a
>> TLE to determine what to do with a file even if the TLE is
>> intentionally bogus. Or an operating system that allows
>> unknown foreign content direct access to the local file
>> system and hardware.

>The biggest problem here is the lack of a su command. Instead of logging
>into your system as a regular user and only su to root/admin when you
>need to, you log in as administrator and have you email/web/whatever
>client running with administrator uid, *BIG DUMB MISTAKE*.

Actually windows have such a feature.. at least W2k pro, you hold some
button (ctrl I think) and then rightclick on a icon, then you get a
extra alternative in the menu called "Start as" (or something similar)
then you can run that program with another users priviledges..

However it doesnt work very well, and I guess that's why MS hides it..
(If so they should hide most of the stuff :)

Personally I always login as administrator on my windowsmachines since
this is the only way to use it without ripping my hair off in anger..
however I would never dream of using windows for anything in production
so I dont care very much, if my windows installation breaks I have to
reinstall it, it does not do anything important anyway. (I usally
only play games with it..)